filenameZY8840.exe
size1461248 (0x164c00)
md553c60c6b0b6c8db602649c867e73e5fa
typePE32 executable (Windows CE) ARM Thumb, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
001
1095072543
1105072569
1096051110
1235072715
10500
1106051165
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x1c2
NumberOfSections5
TimeDateStamp0x5212bd34
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0x10e200
SizeOfInitializedData0x38c400
SizeOfUninitializedData0
AddressOfEntryPoint0xe3d80
BaseOfCode0x1000
BaseOfData0x110000
ImageBase0x10000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x49e000
SizeOfHeaders0x400
CheckSum0
Subsystem9
DllCharacteristics0
SizeOfStackReserve0x10000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x10e12c0x10e200R-X CODE
.rdata0x1100000x4124c0x41400R-- IDATA
.data0x1520000x33ba2c0x5e00RW- IDATA
.pdata0x48e0000x69580x6a00R-- IDATA
.rsrc0x4950000x89b00x8a00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x150ae80x78
RESOURCE0x4950000x89b0
EXCEPTION0x48e0000x6958
SECURITY00
BASERELOC00
DEBUG0x1101500x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x1520000x5f4
Delay_IAT00
CLR_Header00
typenamesizecp
XML#13412880
ICON#116400
ICON#27440
ICON#32960
ICON#437520
ICON#522160
ICON#613840
ICON#773360
ICON#832400
ICON#98720
MENU#65288540
MENU#652891020
DIALOGWCE_FINDDLG4540
DIALOGWCE_FINDDLG_PPC4940
DIALOGWCE_FINDDLG_SP3680
DIALOGWCE_FINDREPLACEBAR1780
DIALOGWCE_REPLACEDLG5180
DIALOGWCE_REPLACEDLG_PPC5580
DIALOGWCE_REPLACEDLG_SP3340
DIALOG#102520
DIALOG#307212320
DIALOG#30734520
STRING#38411300
STRING#3842420
STRING#38434020
STRING#385712500
STRING#38587940
STRING#38597320
STRING#38651720
STRING#386712200
STRING#38686120
STRING#3869440
STRING#3887660
STRING#40812380
RCDATA#28700180
RCDATA#65288320
RCDATA#65289320
GROUP_ICON#1281320
VERSION#18160
idlangstring
614402052Open
614412052Save As
614422052All Files (*.*)
614432052Untitled
614462052an unnamed file
614572052&Hide
614722052No error message is available.
614732052An unsupported operation was attempted.
614742052A required resource was unavailable.
614752052Out of memory.
614762052An unknown error has occurred.
614772052An invalid argument was encountered.
616962052Invalid filename.
616972052Failed to open document.
616982052Failed to save document.
616992052Save changes to %1?
617002052Failed to create empty document.
617012052The file is too large to open.
617022052Could not start print job.
617032052Failed to launch help.
617042052Internal application error.
617052052Command failed.
617062052Insufficient memory to perform operation.
617072052System registry entries have been removed and the INI file (if any) was deleted.
617082052Not all of the system registry entries (or INI file) were removed.
617092052This program requires the file %s, which was not found on this system.
617102052This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
617122052Please enter an integer.
617132052Please enter a number.
617142052Please enter an integer between %1 and %2.
617152052Please enter a number between %1 and %2.
617162052Please enter no more than %1 characters.
617172052Please select a button.
617182052Please enter an integer between 0 and 255.
617192052Please enter a positive integer.
617202052Please enter a date and/or time.
617212052Please enter a currency.
617222052Please enter a GUID.
617232052Please enter a time.
617242052Please enter a date.
617282052Unexpected file format.
617292052%1 Cannot find this file. Please verify that the correct path and file name are given.
617302052Destination disk drive is full.
617312052Unable to read from %1, it is opened by someone else.
617322052Unable to write to %1, it is read-only or opened by someone else.
617332052An unexpected error occurred while reading %1.
617342052An unexpected error occurred while writing %1.
618362052Unable to read write-only property.
618372052Unable to write read-only property.
618562052No error occurred.
618572052An unknown error occurred while accessing %1.
618582052%1 was not found.
618592052%1 contains an invalid path.
618602052%1 could not be opened because there are too many open files.
618612052Access to %1 was denied.
618622052An invalid file handle was associated with %1.
618632052%1 could not be removed because it is the current directory.
618642052%1 could not be created because the directory is full.
618652052Seek failed on %1
618662052A hardware I/O error was reported while accessing %1.
618672052A sharing violation occurred while accessing %1.
618682052A locking violation occurred while accessing %1.
618692052Disk full while accessing %1.
618702052An attempt was made to access %1 past its end.
618722052No error occurred.
618732052An unknown error occurred while accessing %1.
618742052An attempt was made to write to the reading %1.
618752052An attempt was made to access %1 past its end.
618762052An attempt was made to read from the writing %1.
618772052%1 has a bad format.
618782052%1 contained an unexpected object.
618792052%1 contains an incorrect schema.
618882052pixels
621772052Uncheck
621782052Check
621792052Mixed
652812052All Files|*.*|
652822052All Folders
652832052\My Documents
652842052Finished searching the document!
652852052No matching item found!
652862052Menu
652872052Cancel
module_namehintordfunction_name
DDRAW.dllDirectDrawCreate
ole32.dll2CoCreateInstance
ole32.dll7CoInitializeEx
ole32.dll14CoUninitialize
ole32.dll17CreateStreamOnHGlobal
COREDLL.dll2001
COREDLL.dll2003
COREDLL.dll2002
COREDLL.dll534
COREDLL.dll533
COREDLL.dll532
COREDLL.dll10
COREDLL.dll11
COREDLL.dll865
COREDLL.dll262
COREDLL.dll263
COREDLL.dll250
COREDLL.dll497
COREDLL.dll287
COREDLL.dll701
COREDLL.dll535
COREDLL.dll496
COREDLL.dll102
COREDLL.dll864
COREDLL.dll553
COREDLL.dll292
COREDLL.dll493
COREDLL.dll56
COREDLL.dll1152
COREDLL.dll455
COREDLL.dll464
COREDLL.dll456
COREDLL.dll463
COREDLL.dll461
COREDLL.dll1478
COREDLL.dll165
COREDLL.dll167
COREDLL.dll544
COREDLL.dll509
COREDLL.dll23
COREDLL.dll271
COREDLL.dll251
COREDLL.dll1498
COREDLL.dll1397
COREDLL.dll516
COREDLL.dll1238
COREDLL.dll494
COREDLL.dll248
COREDLL.dll886
COREDLL.dll268
COREDLL.dll728
COREDLL.dll833
COREDLL.dll179
COREDLL.dll28
COREDLL.dll27
COREDLL.dll1497
COREDLL.dll1499
COREDLL.dll1582
COREDLL.dll196
COREDLL.dll290
COREDLL.dll557
COREDLL.dll247
COREDLL.dll258
COREDLL.dll259
COREDLL.dll709
COREDLL.dll529
COREDLL.dll912
COREDLL.dll895
COREDLL.dll725
COREDLL.dll482
COREDLL.dll20
COREDLL.dll537
COREDLL.dll88
COREDLL.dll252
COREDLL.dll702
COREDLL.dll877
COREDLL.dll164
COREDLL.dll717
COREDLL.dll184
COREDLL.dll189
COREDLL.dll382
COREDLL.dll381
COREDLL.dll1496
COREDLL.dll549
COREDLL.dll548
COREDLL.dll550
COREDLL.dll171
COREDLL.dll197
COREDLL.dll530
COREDLL.dll528
COREDLL.dll5
COREDLL.dll4
COREDLL.dll2
COREDLL.dll286
COREDLL.dll168
COREDLL.dll1495
COREDLL.dll545
COREDLL.dll885
COREDLL.dll495
COREDLL.dll257
COREDLL.dll24
COREDLL.dll492
COREDLL.dll896
COREDLL.dll922
COREDLL.dll291
COREDLL.dll170
COREDLL.dll108
COREDLL.dll378
COREDLL.dll115
COREDLL.dll117
COREDLL.dll119
COREDLL.dll114
COREDLL.dll118
COREDLL.dll120
COREDLL.dll113
COREDLL.dll354
COREDLL.dll344
COREDLL.dll342
COREDLL.dll347
COREDLL.dll348
COREDLL.dll457
COREDLL.dll460
COREDLL.dll172
COREDLL.dll1494
COREDLL.dll875
COREDLL.dll876
COREDLL.dll707
COREDLL.dll708
COREDLL.dll249
COREDLL.dll254
COREDLL.dll235
COREDLL.dll911
COREDLL.dll902
COREDLL.dll921
COREDLL.dll90
COREDLL.dll910
COREDLL.dll909
COREDLL.dll726
COREDLL.dll903
COREDLL.dll945
COREDLL.dll923
COREDLL.dll924
COREDLL.dll935
COREDLL.dll919
COREDLL.dll36
COREDLL.dll33
COREDLL.dll180
COREDLL.dll181
COREDLL.dll691
COREDLL.dll686
COREDLL.dll873
COREDLL.dll685
COREDLL.dll1159
COREDLL.dll1158
COREDLL.dll699
COREDLL.dll692
COREDLL.dll1157
COREDLL.dll543
COREDLL.dll3
COREDLL.dll868
COREDLL.dll696
COREDLL.dll269
COREDLL.dll101
COREDLL.dll283
COREDLL.dll689
COREDLL.dll288
COREDLL.dll884
COREDLL.dll265
COREDLL.dll688
COREDLL.dll703
COREDLL.dll706
COREDLL.dll517
COREDLL.dll854
COREDLL.dll234
COREDLL.dll855
COREDLL.dll916
COREDLL.dll841
COREDLL.dll908
COREDLL.dll907
COREDLL.dll971
COREDLL.dll918
COREDLL.dll981
COREDLL.dll255
COREDLL.dll261
COREDLL.dll260
COREDLL.dll889
COREDLL.dll640
COREDLL.dll887
COREDLL.dll103
COREDLL.dll1177
COREDLL.dll267
COREDLL.dll264
COREDLL.dll285
COREDLL.dll1075
COREDLL.dll97
COREDLL.dll284
COREDLL.dll862
COREDLL.dll96
COREDLL.dll693
COREDLL.dll95
COREDLL.dll878
COREDLL.dll246
COREDLL.dll853
COREDLL.dll850
COREDLL.dll848
COREDLL.dll847
COREDLL.dll705
COREDLL.dll698
COREDLL.dll256
COREDLL.dll272
COREDLL.dll266
COREDLL.dll704
COREDLL.dll1520
COREDLL.dll866
COREDLL.dll12
COREDLL.dll200
COREDLL.dll210
COREDLL.dll278
COREDLL.dll1013
COREDLL.dll860
COREDLL.dll514
COREDLL.dll859
COREDLL.dll870
COREDLL.dll861
COREDLL.dll682
COREDLL.dll228
COREDLL.dll89
COREDLL.dll173
COREDLL.dll175
COREDLL.dll178
COREDLL.dll520
COREDLL.dll15
COREDLL.dll34
COREDLL.dll16
COREDLL.dll891
COREDLL.dll198
COREDLL.dll227
COREDLL.dll937
COREDLL.dll683
COREDLL.dll844
COREDLL.dll104
COREDLL.dll838
COREDLL.dll275
COREDLL.dll94
COREDLL.dll21
COREDLL.dll166
COREDLL.dll176
COREDLL.dll2044
COREDLL.dll555
COREDLL.dll556
COREDLL.dll515
COREDLL.dll1010
COREDLL.dll2037
COREDLL.dll2652
COREDLL.dll63
COREDLL.dll1094
COREDLL.dll1044
COREDLL.dll2512
COREDLL.dll2005
COREDLL.dll2653
COREDLL.dll61
COREDLL.dll1047
COREDLL.dll2048
COREDLL.dll2033
COREDLL.dll2027
COREDLL.dll2029
COREDLL.dll229
COREDLL.dll1095
COREDLL.dll230
COREDLL.dll1072
COREDLL.dll1132
COREDLL.dll2629
COREDLL.dll60
COREDLL.dll2008
COREDLL.dll1063
COREDLL.dll1066
COREDLL.dll1053
COREDLL.dll1061
COREDLL.dll1457
COREDLL.dll1456
COREDLL.dll2012
COREDLL.dll2043
COREDLL.dll2032
COREDLL.dll2051
COREDLL.dll2026
COREDLL.dll2021
COREDLL.dll66
COREDLL.dll653
COREDLL.dll58
COREDLL.dll64
COREDLL.dll1097
COREDLL.dll2015
COREDLL.dll2020
COREDLL.dll2016
COREDLL.dll2046
COREDLL.dll1051
COREDLL.dll2025
COREDLL.dll2039
COREDLL.dll2052
COREDLL.dll2018
COREDLL.dll1060
COREDLL.dll1043
COREDLL.dll1102
COREDLL.dll1118
COREDLL.dll1121
COREDLL.dll1145
COREDLL.dll719
COREDLL.dll1068
COREDLL.dll1098
COREDLL.dll65
COREDLL.dll1058
COREDLL.dll1004
COREDLL.dll991
COREDLL.dll2053
COREDLL.dll1071
COREDLL.dll2047
COREDLL.dll2031
COREDLL.dll1576
COREDLL.dll1578
COREDLL.dll73
COREDLL.dll867
COREDLL.dll1018
COREDLL.dll1041
COREDLL.dll78
COREDLL.dll1134
COREDLL.dll1571
COREDLL.dll1575
COREDLL.dll1574
COREDLL.dll1120
COREDLL.dll1131
COREDLL.dll1130
COREDLL.dll1551
COREDLL.dll1580
COREDLL.dll1572
COREDLL.dll1404
COREDLL.dll1403
COREDLL.dll1417
COREDLL.dll31
COREDLL.dll2024
COREDLL.dll76
COREDLL.dll75
COREDLL.dll1067
COREDLL.dll1570
COREDLL.dll193
COREDLL.dll1967
COREDLL.dll1090
COREDLL.dll1070
COREDLL.dll1065
COREDLL.dll1411
COREDLL.dll1109
COREDLL.dll1143
COREDLL.dll1125
COREDLL.dll1046
COREDLL.dll1113
COREDLL.dll59
COREDLL.dll87
COREDLL.dll2632
COREDLL.dll2000
COREDLL.dll1096
COREDLL.dll1054
COREDLL.dll74
COREDLL.dll1049
COREDLL.dll2041
COREDLL.dll1092
COREDLL.dll1645
COREDLL.dll2696
COREDLL.dll1876
COREDLL.dll858
COREDLL.dll734
toolhelp.dll10Process32Next
toolhelp.dllCloseToolhelp32Snapshot
toolhelp.dll1CreateToolhelp32Snapshot
toolhelp.dll9Process32First
AYGSHELL.dll114
AYGSHELL.dll115
AYGSHELL.dll113

StringTable 040904e4

CompanyNameTODO: <Company name>
FileDescriptionTODO: <File description>
FileVersion1.0.0.1
InternalNameFrameUi.exe
LegalCopyrightTODO: (c) <Company name>. All rights reserved.
OriginalFilenameFrameUi.exe
ProductNameTODO: <Product name>
ProductVersion1.0.0.1

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
01461248EXE08/20/2013 00:49:56#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK